Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493d0cc9-6b25-36ac-aea9-011285f88be5.roa
File:                     493d0cc9-6b25-36ac-aea9-011285f88be5.roa (raw, json)
Hash identifier:          FhiqjUIfjD6yd26wfzWdsb2ElgGxzxyzuo8W/CMelu4=
Subject key identifier:   BE:88:E5:41:B1:6B:13:EE:FF:C8:DE:5E:0B:20:10:33:7C:20:9E:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858451CE039CE65678964887EF480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493d0cc9-6b25-36ac-aea9-011285f88be5.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     142111
IP address blocks:        50.114.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:39:ce:65:67:89:64:88:7e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=f2a2550b-58f6-4707-a64f-901751fc8650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:1b:36:da:e0:e9:20:d4:85:90:05:6f:03:
                    3b:a1:c2:73:f9:cc:54:01:95:05:95:e5:06:fd:6f:
                    fa:64:ef:ed:22:01:eb:8b:5b:90:85:fd:61:78:08:
                    b5:84:9f:90:30:d4:23:3b:cb:e5:c2:f0:86:6f:c1:
                    ed:4d:20:a0:96:b2:68:b6:8c:e2:84:61:e6:39:9e:
                    74:55:90:ad:23:de:f5:16:b0:98:38:d0:5b:1f:89:
                    f0:2f:da:45:13:c7:69:69:e9:4f:ef:8f:8a:77:e0:
                    5f:e5:0f:1f:3a:e1:19:e9:e3:8d:46:7b:e3:b4:10:
                    b1:97:bf:d6:c7:f6:99:0d:59:c9:93:37:54:69:d2:
                    66:53:01:ff:f9:d4:dd:ea:ea:bf:c6:c8:ee:30:f9:
                    b7:37:c3:fe:38:a4:40:20:58:ed:0a:af:e7:0c:d9:
                    24:4e:b7:2d:07:81:0e:f2:af:5e:1f:2f:67:21:14:
                    a7:ac:35:ce:58:0b:c8:86:5a:eb:12:35:24:aa:ff:
                    a9:67:cd:60:d4:c7:78:2c:60:4c:8f:d6:58:16:0a:
                    fc:66:e2:25:a2:a1:bf:69:b6:cd:63:7e:89:c1:93:
                    99:d1:21:47:9b:48:15:43:3f:53:ae:5b:83:5a:56:
                    45:6b:4b:b6:3e:b6:55:54:41:d3:15:15:a3:93:b0:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:E5:41:B1:6B:13:EE:FF:C8:DE:5E:0B:20:10:33:7C:20:9E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/493d0cc9-6b25-36ac-aea9-011285f88be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:75:f5:be:a9:ea:91:07:4f:9e:ab:63:be:09:ca:ea:91:
         cb:32:77:e5:eb:e0:0c:af:11:6b:0a:5b:e1:e0:14:83:8d:d1:
         39:e9:8d:2d:0f:1b:6c:cc:74:f6:b8:f6:87:d0:35:5e:f2:1e:
         b4:59:c3:c8:2c:05:ea:c8:84:aa:a9:c2:48:c0:9f:0a:e8:29:
         25:de:5c:d4:16:09:ec:c7:7b:dd:e3:32:7f:84:af:54:4e:14:
         95:28:e1:cd:61:a5:14:67:f6:04:e6:2e:bb:b8:41:06:3c:13:
         91:66:58:37:c2:a2:74:17:29:0e:6f:f4:72:25:65:bb:d2:57:
         d7:49:50:0d:84:98:2a:0d:c8:5c:7d:5a:90:25:d6:60:5e:70:
         24:a4:96:7d:74:9d:66:7e:46:7f:2e:88:6f:cd:cc:56:ec:6c:
         a6:50:e6:04:b3:9b:36:52:4f:0e:13:ee:42:e1:5f:1a:22:6b:
         98:c5:19:f8:89:eb:a9:39:2e:81:6a:36:fb:37:4e:64:fe:e4:
         09:24:76:1b:9e:f5:09:30:b7:ab:37:4e:59:2a:d1:c2:4a:66:
         fe:0c:9d:d9:1a:61:4b:9c:b4:f1:5f:b4:a4:35:6e:20:78:40:
         8b:19:45:d3:5a:28:90:13:f3:e8:5b:ee:9a:0a:5e:95:ee:f8:
         c7:9b:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:19 2024 by rpki-client on console-fra.rpki-client.org